S3 Uploads to Wasabi failing after upgrading to 2.0.6
Environment
- Installation type:
-
OTP -
From source
-
- Pleroma version (could be found in the "Version" tab of settings in Pleroma-FE): 2.0.6
- Elixir version (
elixir -v
for from source installations, N/A for OTP): Erlang/OTP 23 [erts-11.0.2] [source] [64-bit] [smp:1:1] [ds:1:1:10] [async-threads:1]
Elixir 1.10.3 (compiled with Erlang/OTP 21)
- Operating system: debian 10.4
- PostgreSQL version (
postgres -V
):
Bug description
Since upgrading to 2.0.6 uploads using the s3 uploader are failing to Wasabi.
Jun 10 22:22:40 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 1
Jun 10 22:22:40 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 2
Jun 10 22:22:41 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 3
Jun 10 22:22:41 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 4
Jun 10 22:22:41 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 5
Jun 10 22:22:41 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 6
Jun 10 22:22:42 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 7
Jun 10 22:22:42 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 8
Jun 10 22:22:43 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 9
Jun 10 22:22:46 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [warn] ExAws: HTTP ERROR: {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}} for URL: "https://s3.us-east-2.wasabisys.com/nsfw.pleroma.bofhllc/909caba3b7e29fe3e5c99b953f2b9375ffd717c0b4a417138957a2b762b6bb19.jpg?uploads=1" ATTEMPT: 10
Jun 10 22:22:46 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [error] Elixir.Pleroma.Uploaders.S3: {:error, {:options, {:sslv3, {:versions, [:"tlsv1.2", :"tlsv1.1", :tlsv1, :sslv3]}}}}
Jun 10 22:22:46 liewrap01 pleroma: request_id=FhdO6hZeLSmOyvcAABQB [error] Elixir.Pleroma.Upload store (using Pleroma.Uploaders.S3) failed: "S3 Upload failed"
Wasabi had me update the cacerts.pem file in /opt/pleroma/deps/certifi/priv/cacerts.pem
by downloading the latest cacerts for curl since they said they did recently update their certificates and had reports of a few other clients with similar issues where that has fixed their problem.
A restart of pleroma though after updating the cacerts.pem file didn't help and users are still getting errors.